Add change password functionality to UCP

By request. Also, it looks like the rest of the UCP code was written
before I learned about forms or something. Next step: refactor UCP.